Microsoft-Windows CAPI2 failed extract of third-party root list from auto update cab

Anonymous

Hi, I get this error in the last few weeks and I am not sure, whether I should do something about it. I went to TechNet, Event ID 11 Automatic Root Certificates Update Configuration, but I would need something simpler that I can follow. Confuseduser P.S. Exact error message is below: -

Log Name: Application

Source: Microsoft-Windows-CAPI2

Date: 27/05/2009 8:42:16 PM

Event ID: 11

Task Category: None

Level: Error

Keywords: Classic

User: N/A

Computer: Helga-PC

Description:

Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

Event Xml:

<Channel>Application</Channel>

<Computer>Helga-PC</Computer>

</System>

<Data>http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab</Data>

<Data>A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

</Data>

</EventData>

</Event>

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

Answer accepted by question author

Anonymous

I don't see any reason the solution above would not work in Vista. I see the same folder structure and registry entries on Vista.

If you are not familiar with the registry, here is a very detailed instruction set on how to delete entries: http://support.microsoft.com/kb/136393

Be sure to use the export option before deleting entries in order to back them up.

0 comments

Answer accepted by question author

Anonymous

This does help.

Now that you've pointed this out I've seen the same behaviour in the CAPI2 Event Viewer log file. My Windows 7 clients have been trying to access two URL's at the domain http://crl.microsoft.com/

None of the posts I had seen on this had mentioned the need for this path.

Thanks,

Michael

Here's a basic definition for CRL in general terms. You can search Google using "Certificate Revocation List" and find a lot more information.

it could also be that direct X is looking for some updated drivers

what happens is that your browser is checking for provoked certificates , is perfectly normal and safe , its to keep you safe

have a nice day

ps for some further info

http://technet.microsoft.com/en-us/library/dd772269.aspx

Scan with OneCare + 50 Windows 7even Tips + Plagued by the Privacy Center? REMOVE IT + Threat Research & Response Blog + Sysinternals Live tools + TRANSLATOR+ Photosynth + Microsoft Security + Microsoft SUPPORT + PIVOT from Live Labs+ Microsoft Live Labs + Office 2010 beta + Get Windows LIVE!

0 comments

138 additional answers

Anonymous

2009-06-08T13:38:33+00:00

Hi confuseduser,

Thanks for the responses.

You are right that was for XP, my oversight. The option I want to present involves verifying the product key for Windows Vista is still active. It may be that there is a need to reactivate your Vista Operating System and this is why it continues to reject the certificate.

Here is a little more information about issues when the product key is not associate with the Operating System ran on the PC.

The Windows Genuine Advantage (WGA) program and Office Genuine Advantage (OGA) program are part of Microsoft’s on-going effort to protect its customers and partners from counterfeit software and to increase customer awareness of the value of genuine Microsoft software.

Here is an excerpt from this Windows document that may provide assistance in verifying the Product key is activated.

http://www.microsoft.com/genuine/downloads/FAQ.aspx?displaylang=en

What is genuine Microsoft software and why is it important?

A:

Genuine Microsoft software is published by Microsoft, properly licensed, and fully supported by Microsoft or a trusted partner. Using genuine Microsoft software offers you greater capabilities and easy integration with the widest variety of hardware, software, and services. It also provides confidence that you will receive the latest product features, updates, and ongoing improvements to keep your PC performing at its best.

What are the facts about activation and validation?

View all answers.

Q:

What is activation?

A:

Activation reduces piracy by associating your Product Key—the 25-character security code located on your Certificate of Authenticity (usually affixed to your software package, PC, or laptop)—to a PC hardware key. Microsoft stores this information in a database so that no one else can use your Product Key on another PC.

Q:

Am I required to activate and/or register my Microsoft software?

A:

Activation is required for many users of Microsoft Windows and Office in order to enjoy the benefits of the software. If Windows activation is required, you will be asked to activate during Windows setup and required to complete activation within the first 30 days of initial use. If Office activation is required, you will be asked to activate the first time you run an Office application and required to activate within the first 50 launches for Office XP and Office 2003, or within first 25 launches for Office 2007. Registration is recommended, but not required.

Q:

What is validation?

A:

Validation is a process that helps you to verify that your Microsoft software is genuine. Microsoft will ask you to validate Windows when requesting a genuine Windows download from the Microsoft Download Center or Windows Update and to validate Office when requesting a genuine Office download.

Q:

What’s the difference between Office validation and Windows validation?

A:

Office validation is a similar but separate process from Windows validation. Office validation only validates Office suites and applications, and Windows validation only validates Windows. To learn more about each process, see the Windows Validation and Office Validation sections of this FAQ.

Q:

Do Volume License customers need to validate?

A:

Yes. Customers using a copy of Windows or Office with a legitimate Volume License will be validated and given full access to genuine Microsoft downloads. Volume License keys have been a source of counterfeit in some instances, so the WGA and OGA validation services are able to recognize and block a Volume License key that is being used improperly.

Q:

Do I have to revalidate if I reinstall Windows or Office on my system?

A:

Yes. You will need to revalidate each time you reinstall Windows, and you will need to revalidate Office each time Office is reinstalled.

Please follow the information from the document to verify the Validation process. It may be that this will resolve the issue.

Debbie

Microsoft Answers Support Engineer

Visit our Microsoft Answers Feedback Forumand let us know what you think.
Was this answer helpful?

0 comments No comments
Anonymous

2009-06-08T13:32:18+00:00

Hi Debbie

We have the same problem on more and more of your Windows Server 2008 machines. Is there also an "Update for Root Certificates" for this operating system - 64bit version? (maybe the same for vista)

thanks in advance

Yves
Was this answer helpful?

0 comments No comments
Anonymous

2009-06-08T06:53:01+00:00

Hi Debbie, I clear the IE8 cache regularly (and did so again), but it did not change the problem. I also RESET IE 8 and it makes no difference to the error. When I went to the Update for Root Certificates, it seems to be for XP and I have VISTA. Did you look at my message above, which gives details of the certificate which is not valid for the intended usage?????? Confuseduser
Was this answer helpful?

0 comments No comments